Commit Graph

17661 Commits (f8168493f6ecf3d4bc40effcb65d6ecba077b43e)
 

Author SHA1 Message Date
Philippe Antoine f8168493f6 rust: remove unnecessary cbindgen exclusions 1 month ago
Philippe Antoine 59a5b53809 util/mpm: constify arg
and make rust version use the correct integer type

Ticket: 7762
1 month ago
Jeff Lucovsky e8753b9ba7 util/mtu: Avoid excessive ioctls for MTU
Issue: 7643

Use the cached livedev MTU value, when available.
1 month ago
Boris Tonofa 97bfa3b108 pcap-log: fix memory leak on error paths after SCStrdup(prefix)
When PcapLogDataCopy() fails after duplicating pl->prefix,
the allocated 'prefix' string was not freed, leading to a leak.

Ticket: 7759
1 month ago
Jason Ish 17ed6f7b8e windows: use _tzname instead of tzname
tzname is a POSIX variable, WIN32 has prefixed many POSIX variables
with "_". While Mingw64 supports both, UCRT64 emits a compiler warning
on the usage of "tzname".

This triggered a rather large clang-format update.
1 month ago
Jason Ish 106e09ed57 github-ci: add windows ucrt build
MSYS2 now recommends the UCRT environment as the default, so we should
probably add a CI job for it.
1 month ago
Jason Ish f35a56fa65 doc/code-style: add rust; minor cleanups
- Add small section on Rust code, and Rust code exposed to FFI.
- Other minor cleanups.

Ticket: #7078
Ticket: #6955
1 month ago
Jason Ish 249bd32a9d doc/userguide/code-style: update header ordering
To match our recommended header ordering.
1 month ago
Shivani Bhardwaj 6a6104304d version: start development towards 8.0.0 1 month ago
Shivani Bhardwaj cdfebcdc9c release: 8.0.0-rc1; update changelog 1 month ago
Andreas Herz 173132b05b detect/dataset: skip adding localstatedir if fullpath is provided
When the option to set a full path is enabled and a full path is
provided, skip adding the prefix (based on localstatedir) to the
directory since it would be unexpected and unwanted by a user.

Ticket: 7083
1 month ago
Eric Leblond 8f26b4a0ff datajson: limit impact of feature for non user
The det_ctx structure was inflated by the additoin of the array to
handle JSON context. This commit updates the code to use a growing
buffer and limit the impact.
1 month ago
Victor Julien 36ecda3ea2 detect/alert: optimize context cleanup
Don't always loop over each alert, but only do so if context was used.
1 month ago
Jason Ish 25b8cd9761 lua: update to lua 5.4.8002
This updated crates remove tmpnam from being linked in, removing the
warning.
1 month ago
Victor Julien 77fb0a1e79 packet: micro optimization in packet recycling 1 month ago
Victor Julien 32223bb6f7 detect: move large array to bottom of detect thread ctx 1 month ago
Eric Leblond 639eb70dda detect/pcre: add needed casts 1 month ago
Eric Leblond f747a3a001 datajson: add needed cast 1 month ago
Eric Leblond cff2198ef3 datajson: fix include in header 1 month ago
Eric Leblond 6e0cad33cb detect: remove some useless tests 1 month ago
Eric Leblond 751f3eef3b doc/userguide: fix some typos 1 month ago
Eric Leblond a297fd029a packet: optimize json context cleaning
We don't need to recycle the full alert array. This is going to
optimize packet recycle time.
1 month ago
Eric Leblond 1deca14331 decode: light refactor on packet cleaning 1 month ago
Eric Leblond 8425eed8cd datasets: improve lock handling
DatasetGetOrCreate should now be called with the dataset lock
hold so the lock management is easier to read.
1 month ago
Eric Leblond 131bfb9679 detect/dataset: fix locking on datajson 1 month ago
Eric Leblond cf7dda354e detect/dataset: check context_key validity
As context_key is an user entry and as it is used to build the JSON
string of alert, we could end up with an invalid event if the string
contains improper characters.
1 month ago
Eric Leblond 803d61c9d1 eve/alert: add comment about string format 1 month ago
Eric Leblond 0f172e721d detect/pcre: fix error handling 1 month ago
Eric Leblond ab5070c0e3 detect/engine: put datajson related code in a func 1 month ago
Eric Leblond e600f40f74 datasets: use SCLogError for errors 1 month ago
Eric Leblond 337472449a detect/engine: remove unused keyword 1 month ago
Eric Leblond cd07db83dc datasets: comment to specify usage of field 1 month ago
Eric Leblond be9e13c6b1 decode: use pointer for PacketContextData
By adding a pointer instead of the structure in the alert info
we spare some memory.
1 month ago
Eric Leblond 92f4b36e72 decode: rename ExtraDataJsonList 1 month ago
Eric Leblond b285894f69 datasets: comments about format 1 month ago
Eric Leblond 449d6fe607 datasets: rename function
DatasetCreateOrGet was in fact doing get or create.
1 month ago
Eric Leblond e0c5302df1 datasets: fix error handling in StringSet 1 month ago
Eric Leblond 9b6047ab3e datasets: factorize set operation 1 month ago
Eric Leblond 3880b8de22 datasjson: fix include barrier name 1 month ago
Eric Leblond be0f5dac0d detect/pcre: fix copyright date 1 month ago
Eric Leblond 43743b0fd3 datajson: key length fix
When using type string, we should not limit the size of the string.

This patch also fixes some implicit cast issues.
1 month ago
Eric Leblond 43a1ef45ca datajson: value_key is necessary in json format 1 month ago
Eric Leblond 6236574b9c doc/userguide: enrichment_key is now context_key 1 month ago
Eric Leblond 62e90206c6 datajson: rename enrichment_key to context_key 1 month ago
Eric Leblond 3e48342248 datajson: factorize code
Code was duplicated and a build error was reported so factorizing
was the best way to clean it.
1 month ago
Eric Leblond df99d29ee4 datajson: add sanity check on length
Also cast to avoid compilation error.
1 month ago
Eric Leblond cfa7a747c2 datajson: use systematic allocation 1 month ago
Eric Leblond d84d7431e4 datajson: more explicit memory handling 1 month ago
Eric Leblond 20a0575d96 doc/userguide: fix some typos
Suggestions from Juliana.

Co-authored-by: Juliana Fajardini Reichow <jufajardini@gmail.com>
1 month ago
Eric Leblond 23f643a4a7 eve/schema: fix ordering 1 month ago